$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6c87bfee-2afd-329c-ab90-d7ff3cf0e9d8.roa File: 6c87bfee-2afd-329c-ab90-d7ff3cf0e9d8.roa (raw, json) Hash identifier: CAuDjLFF6zKLq6AQRiAokRiMCq29cdEPrZtVVNEnT48= Subject key identifier: 7D:E9:E9:FD:60:47:61:A5:22:89:51:BD:2F:7F:3C:53:11:45:15:22 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851BF440011AC21FB1D080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6c87bfee-2afd-329c-ab90-d7ff3cf0e9d8.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.138.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1b:f4:40:01:1a:c2:1f:b1:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ba3234b0-4912-48e7-a779-2882794fff60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:0c:60:1f:31:5f:26:9d:ec:0b:ff:01:8e: 57:d6:b4:34:13:16:40:b7:b3:7d:c2:9c:89:f9:6f: a6:bd:07:55:d5:d4:52:dc:7c:c2:63:92:de:c8:e4: 2b:95:60:e7:f0:61:2e:14:c3:d7:82:e8:c3:c0:1e: 98:f6:bc:c7:8b:d1:e6:c7:17:44:f2:3d:5f:b3:91: bb:51:99:99:07:2f:6b:ca:41:e4:69:8d:e4:5b:e0: de:2c:3c:7e:46:0f:53:bb:f2:40:eb:cb:63:6a:5e: e9:9a:77:08:54:44:e5:ab:84:3f:ab:1b:81:30:ea: ba:4e:f4:db:7e:ee:9b:13:d3:23:a6:08:84:74:92: f5:36:40:5d:63:b7:1a:98:ac:dd:1f:a8:8c:bf:d0: 3f:bf:c4:72:2f:9d:7d:ee:54:ad:56:68:27:c7:00: 0e:f4:f0:39:67:de:a1:0b:3b:91:0b:9b:e9:68:a5: 3a:4c:fc:a1:b9:22:eb:ca:54:c1:97:67:39:fc:02: 4e:44:ac:37:54:56:93:5b:64:ee:58:fd:fb:1d:4d: 1d:af:7d:26:3e:93:f8:f3:c0:c4:e4:5a:7e:0a:c0: b6:d4:7a:e4:0f:aa:67:14:79:88:93:88:bc:d6:65: 3b:9a:59:df:43:b4:22:53:d2:56:70:14:ab:4f:71: 25:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E9:E9:FD:60:47:61:A5:22:89:51:BD:2F:7F:3C:53:11:45:15:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6c87bfee-2afd-329c-ab90-d7ff3cf0e9d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:bc:23:b1:db:7f:8f:d7:47:5e:ee:81:5a:e4:a5:06:b2:76: b1:59:be:32:2e:a3:47:2f:82:57:9f:3a:a7:85:4f:2b:4e:13: 90:da:8b:d8:89:a1:4e:04:57:10:83:69:2b:7f:a1:07:5f:62: 40:af:77:65:1e:e4:7e:53:f5:14:27:b1:6f:b8:47:78:74:4e: 34:12:c1:14:fa:a7:a2:0f:2e:ae:2b:7f:69:db:90:ec:5c:af: f2:8b:ed:89:ae:46:f1:3f:39:b0:f1:1f:9c:31:c1:89:fd:08: 23:4a:e9:c2:84:96:7c:c4:5a:90:04:f4:99:a4:a8:77:dc:f5: 47:28:3a:d9:33:91:07:09:fc:a1:fd:39:aa:18:92:ca:44:b4: 9b:cf:5c:30:e0:dc:0f:37:bb:16:01:70:8e:39:f7:7a:24:69: 97:04:b3:f4:2e:d0:75:f1:74:07:52:ed:1e:aa:a9:40:3c:1d: 86:05:51:62:a3:5d:24:a0:20:34:6c:05:28:f9:70:99:b4:3e: e5:c1:9a:8e:4d:cb:12:8e:89:43:59:c5:8e:5b:e0:59:f4:4e: 48:de:37:00:40:86:c8:83:7a:5d:80:7f:ad:62:d4:e7:55:1f: 57:36:d0:8f:0f:ea:85:0f:9f:2e:03:dc:97:1a:1d:c1:59:7c: fa:e3:7e:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRv0QAEawh+x0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YmEzMjM0YjAtNDkxMi00OGU3LWE3NzktMjg4Mjc5NGZmZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAkMYB8xXyad7Av/AY5X1rQ0ExZAt7N9wpyJ +W+mvQdV1dRS3HzCY5LeyOQrlWDn8GEuFMPXgujDwB6Y9rzHi9HmxxdE8j1fs5G7 UZmZBy9rykHkaY3kW+DeLDx+Rg9Tu/JA68tjal7pmncIVETlq4Q/qxuBMOq6TvTb fu6bE9MjpgiEdJL1NkBdY7camKzdH6iMv9A/v8RyL5197lStVmgnxwAO9PA5Z96h CzuRC5vpaKU6TPyhuSLrylTBl2c5/AJORKw3VFaTW2TuWP37HU0dr30mPpP488DE 5Fp+CsC21HrkD6pnFHmIk4i81mU7mlnfQ7QiU9JWcBSrT3ElZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3p6f1gR2GlIolRvS9/PFMRRRUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmM4N2JmZWUtMmFmZC0z MjljLWFiOTAtZDdmZjNjZjBlOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIopgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW8I7Hbf4/XR17ugVrkpQaydrFZvjIuo0cvglefOqeFTytOE5Dai9iJ oU4EVxCDaSt/oQdfYkCvd2Ue5H5T9RQnsW+4R3h0TjQSwRT6p6IPLq4rf2nbkOxc r/KL7YmuRvE/ObDxH5wxwYn9CCNK6cKElnzEWpAE9JmkqHfc9UcoOtkzkQcJ/KH9 OaoYkspEtJvPXDDg3A83uxYBcI4593okaZcEs/Qu0HXxdAdS7R6qqUA8HYYFUWKj XSSgIDRsBSj5cJm0PuXBmo5NyxKOiUNZxY5b4Fn0TkjeNwBAhsiDel2Af61i1OdV H1c20I8P6oUPny4D3JcaHcFZfPrjfgM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:33 2025 by rpki-client